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REMARKS 

Please reconsider this application in view of the above amendments and the 
following remarks. The Applicant thanks the Examiner for carefully considering this application 
and for indicating that the claims of record would be allowable if the rejections under 35 U.S.C. 
§ 1 12 are overcome (see Office Action dated June 27, 2006, page 4). 

Examiner Interview 

The Applicant thanks the Examiner for the courtesies extended during the 
Examiner Interview conducted on August 14, 2006. The Applicant has reviewed the Examiner's 
interview summary and has no additional comments at this point in the prosecution. 

Disposition of Claims 

Claims 1-6, 9-21, 24-36, and 39-45 are pending in the application. Claims 1,16, 
and 31 are independent. The remaining claims depend, directly or indirectly, from independent 
claims 1, 16, and 31. 

Claim Amendments 

By way of this reply, claims 1, 10, 16, 25, 31, and 40 have been amended to 
clarify antecedent basis issues. Specifically, the claims have been amended to clarify that the 
predefined rule referred to in claims 10, 25, and 40 corresponds to a first predefined rule. 
Further, by way of this reply, claim 16 has been amended to correct a typographical error. 
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Priority Document 

The Applicant has recently discovered that a certified copy of the French priority 
document for this application has not been forwarded to date. This failure to submit the priority 
document was inadvertent and unintentional. A copy of the certified priority document is being 
filed contemporaneously with this response. 

Rejections under 35 U.S.C. § 112 f 2 

Claims 10, 25, and 40 stand rejected under 35 U.S.C. § 112 If 2 as being 
indefinite. Specifically, the Examiner has asserted that claims 10, 25, and 40 lack sufficient 
antecedent basis for "the predefined rule" recited in the claims (see Office Action dated June 27, 
2006, page 2). By way of this reply, claims 1, 10, 16, 25, 31, and 40 have been amended to 
clarify that the predefined rule referred to in claims 10, 25, and 40 corresponds to a first 
predefined rule. In view of these amendments, the Applicant respectfully submits that amended 
claims 10, 25, and 40 are not indefinite. Accordingly, withdrawal of this rejection is respectfully 
requested. 

Rejections under 35 U.S.C. § 112 f 1 

Claims 1-6, 9-21, 24-36, and 39-45 stand rejected under 35 U.S.C. § 112 ^ 1 as 
failing to comply with the written description requirement. Specifically, the Examiner has 
asserted that the disclosure does not provide written basis for "a first user entry in the tree 
structure" and "a second user entry ... the second user entry belonging to the extra scope" as 
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recited in independent claims 1, 16, and 31 (see Office Action date June 27, 2006, pages 3-4). 
This rejection is respectfully traversed. Specifically, written basis for the limitations in question 
can be found in the Specification as published, as described below. 

1. A first user entry in the tree structure 

As described in the Specification, a role entry typically has an associated scope 
based on the role entry's location in the tree structure (see, e.g., Figure 6, where the scope of a 
role entry is a subtree of the role entry's parent entry). Further, user entries belonging to the 
associated scope may be members of the role subject to a role membership condition. For 
example, members of a managed role must have an attribute designating the role defined in the 
role entry (e.g., a distinguished name (DN) attribute corresponding to the DN of the role entry); 
members of a filtered role must match a filter specified in the role entry; and members of a 
nested role must meet the role condition(s) for at least one of the roles referenced by the role 
entry (see, e.g., page 18, line 18 - page 21, line 10 of the Specification). Thus, the "first user 
entry" recited in the claims is a user entry that belongs to a role's scope and meets the 
appropriate role membership condition, as clearly supported by the Specification. 

2. a second user entry... the second user entry belonging to the extra scope 

As described in the Specification, an extra scope may be defined for a role entry 
by adding an attribute to the role entry that defines the extra scope (see, e.g., page 23, lines 4-15 
of the Specification). Figure 14 shows one example of an extended role, where an 
nsRoleScopeDN attribute is added to the cn = every body cross 2 role entry to extend the role's 
scope to include the subtree of o = sujfix2 (see also page 32, line 15 - page 34, line 7). Further, 
user entries belonging to the extra scope may be members of the extended role subject to a role 
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membership condition, as described above (see also page 25, lines 4-9 of the Specification). 
Thus, the "second user entry" recited in the claims is a user entry that belongs to the extra scope 
and meets the appropriate role membership condition, as clearly supported by the Specification. 

In view of the above, the Specification clearly provides written basis for "a first 
user entry in the tree structure" and "a second user entry ... the second user entry belonging to 
the extra scope" as recited in independent claims 1, 16, and 31. Accordingly, withdrawal of this 
rejection is respectfully requested. 

Conclusion 

The Applicant believes this reply is fully responsive to all outstanding issues and 
places this application in condition for allowance. If this belief is incorrect, or other issues arise, 
the Examiner is encouraged to contact the undersigned or his associates at the telephone number 
listed below. Please apply any charges not covered, or any credits, to Deposit Account 50-0591 
(Reference Number 03226/500001 ; P7528). 

Dated: August 28, 2006 Respectfully submitted, 




1221 McKinney St., Suite 2800 
Houston, Texas 77010 
(713) 228-8600 
(713) 228-8778 (Fax) 
Attorney for Applicant 
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